Avoid logging sensitive data

문서 > 코드 분석 > Static Analysis Rules > Avoid logging sensitive data

이 페이지는 아직 한국어로 제공되지 않으며 번역 작업 중입니다. 번역에 관한 질문이나 의견이 있으시면 언제든지 저희에게 연락해 주십시오.

Metadata

ID: javascript-node-security/log-sensitive-data

Language: JavaScript

Severity: Warning

Category: Security

CWE: 532

Description

Do not log sensitive data such as user id, email or other personal data (first name, last name, etc).

Non-Compliant Code Examples

console.log("email from user" + user.email);
console.log(`email from user ${user.email}`);
logger.info(`email from user ${user.email}`);
logger.info(`email from user ${user.name}: ${user.email}`);
logger.info(`email from user ${username}: ${user.email}`);
logger.warn(email);
logger.error(`email from user ${email}`);

foobar.error(`email from user ${email}`);

logger.foobar(`email from user ${email}`);

Compliant Code Examples

console.log("email from user" + user.id);
console.log(`email from user ${user.uuid}`);